This policy explains what personal data PostDooth (“we”) processes when you visit postdooth.com or use the PostDooth app, why, and the choices you have. PostDooth is operated by BDVsystems, Bengaluru, Karnataka 560016, India, which is responsible for this processing. It is written to meet India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
Data we collect
- Account data: your name, email address, a one-way hash of your password, and when you accepted our terms.
- Workspace content: posts, campaigns, Brand Brain profiles, media you upload, and your team’s roles and invitations.
- Connected accounts: access tokens issued by social platforms, Google or Microsoft when you connect an account through their official sign-in. They are stored encrypted. We never ask for or store the passwords of your social media or email accounts.
- Billing: your plan, trial dates and subscription status. Payments are made on Razorpay’s or Stripe’s own pages; we never receive your card, UPI or bank details.
- Contact form: your name, email and message, and a salted hash of your IP address to stop abuse.
- Security and operations: sign-in events, audit records of important actions, and error logs. Logs do not contain passwords or tokens.
How we use it
- To provide the service: publish what you schedule, show your history, send account emails.
- To bill for paid plans and keep records required by tax law.
- To keep it secure and lawful: detect abuse, lock accounts after repeated failed sign-ins, investigate reports of content that breaks our Terms, and answer lawful requests from authorities.
- To answer you when you contact us.
We do not sell personal data and do not show advertising.
AI processing
When you use AI features, the text you provide and relevant Brand Brain facts are sent to an AI service to produce a draft. On Pro, this is OpenAI, with Google Gemini as a backup, under the providers’ paid API terms, which state that content is not used to train their models. On Starter and during the free trial, this is Google Gemini’s free tier, under which Google may use the content to improve its products and people may review it; do not put confidential or personal information into AI requests on Starter. If your browser has its own built-in AI (for example Gemini in Chrome) and you use it for drafting or spelling checks, that runs on your device and the text is not sent to PostDooth or to an AI service. Providers may keep data for a limited time to detect abuse.
Sharing
We share data only with service providers needed to run PostDooth (hosting, email delivery, AI providers, Razorpay and Stripe for payments) and with the platforms you choose to publish to. [Owner: list sub-processors and hosting regions.]
Retention and deletion
We keep your data while your account exists. When you delete your account or a workspace in the app, it is erased immediately and cannot be restored; encrypted backups that still contain it are overwritten within 30 days. Payment and tax records are kept as long as the law requires. Audit records keep only identifiers and counts.
Your rights
You can download your workspace data from the app, correct your profile, and delete your account at any time. For other requests — access, correction, erasure, nominating someone to act for you, or a grievance — use the contact form (topic “Privacy and data”). If you are not satisfied with our answer, you may complain to the Data Protection Board of India or the authority where you live.
Cookies
See the Cookie Policy.
Contact and grievance officer
Privacy questions and grievances: the contact form, or our Grievance Officer, [name], [email address], BDVsystems, Bengaluru, Karnataka 560016, India. We acknowledge grievances within 24 hours and resolve them within 15 days.